WordPress and Protecting Directories with .htaccess

You’ll find sometime that when you deploy WordPress in order for permalinks to work correctly you need a proper .htaccess file. This .htaccess also affects anything else you place within your web root when WordPress lives.

For instance if you need to password protect a directory within the your webroot where WordPress lives. You’ll find that when you do so, and try to visit that folder in a web browser that a 404 WordPress page will be displayed. To fix this, you simply need to add the following to your main .htaccess file that has your WordPress rules.

ErrorDocument 401 default

This should then allow you to use your password protected directories as you normally would if you didn’t have WordPress installed.

Source: http://www.andrewrollins.com/2008/01/22/wordpress-and-htaccess-password-protected-directories/

Pasword Protected Sub Directories Missing on Index Listing with Apache2

If you’ve setup a folder that allows listing of the directory index, you will be presented with that directories contents. Folders and files will be show and you can navigate through each folder. However, if you’ve password protected a sub directory, it will not show up in the listing. This is because its considered to be protected and the user should not be able to access it.

To override this option you must place the following into your root .htaccess file, not the one protecting the folder.

IndexOptions +ShowForbidden

http://httpd.apache.org/docs/current/mod/mod_autoindex.html